upstream/icingaweb2-module-businessprocess
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2-module-businessprocess.git synced 2026-05-28 04:34:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Metadata: simpler auth handling

Browse source
This commit is contained in:
Thomas Gelf 2016-12-09 14:17:25 +01:00
parent 0aeb3183f4
commit 588542e304
1 changed files with 51 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

54
library/Businessprocess/Metadata.php
View file

@ -9,6 +9,8 @@ use Icinga\User;
class Metadata
{
protected $name;
protected $properties = array(
'Title' => null,
'Description' => null,
@ -16,11 +18,37 @@ class Metadata
'AllowedUsers' => null,
'AllowedGroups' => null,
'AllowedRoles' => null,
'AddToMenu' => null,
'Backend' => null,
'Statetype' => null,
// 'SLAHosts' => null
);
public function __construct($name)
{
$this->name = $name;
}
public function getTitle()
{
if ($this->has('Title')) {
return $this->get('Title');
} else {
return $this->name;
}
}
public function getExtendedTitle()
{
$title = $this->getTitle();
if ($title === $this->name) {
return $title;
} else {
return sprint('%s (%s)', $title, $this->name);
}
}
public function getProperties()
{
return $this->properties;
@ -82,7 +110,7 @@ class Metadata
return Auth::getInstance();
}
public function permissionsAreSatisfied(Auth $auth = null)
public function canModify(Auth $auth = null)
{
if ($auth === null) {
if (Icinga::app()->isCli()) {
@ -92,6 +120,26 @@ class Metadata
}
}
return $this->canRead($auth) && (
$auth->hasPermission('businessprocess/modify')
|| $this->ownerIs($auth->getUser()->getUsername())
);
}
public function canRead(Auth $auth = null)
{
if ($auth === null) {
if (Icinga::app()->isCli()) {
return true;
} else {
$auth = $this->getAuth();
}
}
if ($auth->hasPermission('businessprocess/showall')) {
return true;
}
if (! $this->hasRestrictions()) {
return true;
}
@ -100,10 +148,10 @@ class Metadata
return false;
}
return $this->userIsAllowed($auth->getUser());
return $this->userCanRead($auth->getUser());
}
public function userIsAllowed(User $user)
protected function userCanRead(User $user)
{
$username = $user->getUsername();